Ranfdev vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ranfdev products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-46509 High · 8.2 CWE-1321 May 28, 2026

deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when property paths contain __proto__/constructor/prototype. The property path must not be exposed as user input. This vulnerability is fixed in 1.0.3.